Senior Internal Audit Manager Technology

At CRH, this opportunity offers the chance to lead technology audit teams and strengthen the company’s technology, cyber, and operational risk management across a global organization.

About CRH

CRH is the leading provider of building materials critical to modernizing infrastructure. With a team of 83,000 people across 4,000 locations, CRH supports transportation, water, and reindustrialization projects worldwide.

Position Overview

As a Senior Internal Audit Manager, Technology, you will manage a team responsible for driving greater efficiencies, strengthening the technology control environment, and enhancing CRH’s performance and growth through improved technology, cyber, and operational risk management. You will build and develop high performing audit teams while working with diverse companies and cultures across CRH worldwide, gaining exposure to a broad range of technology landscapes, digital initiatives, and business environments.

To be effective in this role, you must be capable of assessing and improving complex IT and cyber related processes, including applications, infrastructure, security, data, and ERP environments, while demonstrating strong analytical, communication, and people leadership skills. This position offers a unique opportunity to influence how risks related to technology are managed across the Group and provides a strong platform for progression into more senior leadership roles within Internal Audit, Technology, or other business functions.

Key Tasks and Responsibilities

In this role, you will:

• Manage and deliver assigned engagements of the annual IT audit plan, including scoping, executing and reporting on risk-based IT and cyber audits, ensuring high-quality controls.
• Direct and develop audit teams by delegating effectively, removing obstacles, providing coaching and feedback, and fostering an engaged, high-performing culture built on trust, collaboration and continuous learning.
• Assess and improve complex IT, cyber, ERP, AI, OT and digital control environments, providing commercially focused, pragmatic recommendations that balance risk mitigation with operational efficiency.
• Drive functional projects and initiatives that support technology-enabled audit transformation, improving governance, control standards, and operational efficiency, including SOX, frameworks, and methodology.
• Build and maintain strong relationships with IT, security, finance, and operations stakeholders, acting as a trusted advisor while maintaining independence and representing Internal Audit with credibility and professionalism.
• Identify emerging technology risks and propose innovative solutions that enhance Internal Audit effectiveness, leveraging data analytics, automation, and audit technologies to improve insights and efficiency.
• Travel to CRH locations as required to oversee planning and fieldwork, conduct stakeholder discussions, and coach teams in diverse environments.

Key Functional Competencies

For this role you should be able to / have the following:

• Act with integrity and objectivity, exercising professional judgement while maintaining independence in accordance with the Global Internal Audit Standards (GIAS).
• Apply strong audit methodology and assurance practices, including risk assessment, scoping, process walkthroughs, control design evaluation, control testing, and data-driven auditing.
• Influence and communicate effectively, translating complex IT and cyber risks into clear, actionable insights for senior stakeholders while confidently challenging decisions when needed.
• Manage and develop high-performing teams, fostering collaboration and coaching for growth, while contributing to the advancement of Internal Audit methodologies, governance standards and technology risk maturity.
• Leverage technology-enabled auditing tools, including automation, analytics, and digital platforms, to enhance audit effectiveness, efficiency and insights.
• Demonstrate a strong command of IT and cyber risk fundamentals, including ITGCs, IT governance, cybersecurity principles, SOX technology controls, and relevant industry frameworks such as NIST and COBIT.
• Bring advanced knowledge of ERP, OT, AI and core business systems, such as SAP/SAP HANA, dispatch/industrial control systems, and the ability to connect IT controls to underlying business processes.
• Show technical understanding of security architecture and controls, including network/perimeter security, identity and access management, secure software development, cloud and virtualization…